This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json) Hash identifier: OCQB5LhzqaOGrJZF1udj4GWFRGnAJu1j/aZFsScaaqE= Subject key identifier: BA:0F:74:C8:05:1F:36:33:BF:7C:23:99:ED:2E:77:FB:30:41:9E:95 Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5 Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5 Certificate serial: 019B424A8D2BEA56A50FE44AA495562BB8E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft Manifest number: 171C Signing time: Sun 21 Dec 2025 19:02:20 +0000 Manifest this update: Sun 21 Dec 2025 19:02:20 +0000 Manifest next update: Mon 22 Dec 2025 19:02:20 +0000 Files and hashes: 1: LhVPheiP2Wbqe7xFjCy9IQ_CSc0.roa (hash: Jd5k/N8+tstl7PIZFFMbIYM8R6nDjGK5pnVrR8G85AA=) 2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: 5mEbKMpvDHnYeVR/QdXXOlawIJtiJ4og/bg3v9qgL98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:8d:2b:ea:56:a5:0f:e4:4a:a4:95:56:2b:b8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43c77b47363681378face466141d54cc88399cf5 Validity Not Before: Dec 21 19:02:20 2025 GMT Not After : Dec 22 19:02:20 2025 GMT Subject: CN=ba0f74c8051f3633bf7c2399ed2e77fb30419e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6b:66:bf:1c:9b:d1:16:e5:ab:ec:80:2e:6c: 91:81:5e:2b:dc:fd:10:f8:d7:f3:87:2e:4a:7a:cd: 94:6c:68:9e:82:a2:df:b0:f1:56:f9:52:bb:57:d9: 34:89:b7:05:db:e7:95:27:72:34:9a:87:fa:a1:9e: 12:00:14:3d:83:e0:ee:5a:71:2f:ee:e6:60:7c:1a: 57:9f:28:7b:0e:56:6e:d0:a2:c4:fe:6e:9f:1b:9e: 79:82:39:a9:be:5f:1b:79:69:8f:e0:92:44:5d:b9: 90:0a:2d:5b:d4:1f:d3:47:d2:69:66:40:4d:b2:9e: b4:85:d7:ac:c7:8d:90:16:27:8f:4e:64:82:8f:2b: 2b:f6:26:f2:54:40:91:e1:77:7a:2e:b3:77:ac:6c: d6:80:7e:f4:d8:fa:a5:c5:70:2f:20:69:a6:51:76: 75:9a:67:e6:58:0f:95:30:13:74:cb:d0:cd:73:5c: c3:f3:be:dc:01:a5:69:62:64:37:f0:1d:c8:04:35: 41:d8:f9:5b:db:ae:20:a4:ea:7f:8d:4f:11:74:ad: 4a:20:04:2b:9d:67:3e:95:dc:1f:30:c9:9d:33:17: ad:ac:e4:80:a4:60:9a:bc:4f:66:bc:5c:a4:5e:dd: 5f:7e:6c:7a:0f:8f:c4:51:99:e4:15:2f:8b:62:bd: b9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0F:74:C8:05:1F:36:33:BF:7C:23:99:ED:2E:77:FB:30:41:9E:95 X509v3 Authority Key Identifier: keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:67:33:f9:7d:27:d4:56:a7:e9:d7:48:42:02:d7:b6:b2:1e: 77:35:a4:50:aa:86:a1:2e:c4:9b:67:b1:e1:67:82:a9:4d:7c: 7c:f1:45:b4:3d:c1:0a:93:5a:1e:22:f2:31:b8:d8:7d:18:fc: d5:a3:a8:ff:1e:5a:62:55:34:6b:2e:fd:4a:f2:45:ab:b9:26: ff:1c:e3:3f:2a:aa:9d:82:31:7b:83:56:cf:67:82:8c:a9:ff: 43:00:48:b0:33:f4:f1:0e:1d:b7:2f:ad:74:fb:88:75:42:5d: 5b:07:b4:92:da:2a:fb:8f:da:cf:b6:f3:e4:11:87:31:fa:f9: 15:7e:a8:ec:1a:a4:96:69:fb:fa:2c:75:ae:c1:d7:6c:57:6a: ce:e4:e4:c2:91:ff:79:aa:b3:59:65:e3:6a:73:b7:7a:75:a9: 03:fe:88:b8:4f:b4:71:6f:c7:12:48:cf:f6:ba:b0:56:44:a8: 0f:aa:1c:37:e0:f9:d6:80:43:98:c1:35:2f:61:86:de:3f:94: 24:4c:2e:ef:95:df:1d:4a:c0:06:e3:74:29:a2:63:97:db:10: 9a:41:14:6f:e8:71:39:65:93:39:07:75:61:43:c7:a7:08:98: cc:8b:f1:b0:3f:90:5d:c2:6a:1b:e9:a1:d3:13:14:84:b3:b3: 83:37:8a:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSo0r6lalD+RKpJVWK7jhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYzc3YjQ3MzYzNjgxMzc4ZmFjZTQ2NjE0MWQ1NGNjODgz OTljZjUwHhcNMjUxMjIxMTkwMjIwWhcNMjUxMjIyMTkwMjIwWjAzMTEwLwYDVQQD EyhiYTBmNzRjODA1MWYzNjMzYmY3YzIzOTllZDJlNzdmYjMwNDE5ZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWtmvxyb0Rblq+yALmyRgV4r3P0Q +Nfzhy5Kes2UbGiegqLfsPFW+VK7V9k0ibcF2+eVJ3I0mof6oZ4SABQ9g+DuWnEv 7uZgfBpXnyh7DlZu0KLE/m6fG555gjmpvl8beWmP4JJEXbmQCi1b1B/TR9JpZkBN sp60hdesx42QFiePTmSCjysr9ibyVECR4Xd6LrN3rGzWgH702PqlxXAvIGmmUXZ1 mmfmWA+VMBN0y9DNc1zD877cAaVpYmQ38B3IBDVB2Plb264gpOp/jU8RdK1KIAQr nWc+ldwfMMmdMxetrOSApGCavE9mvFykXt1ffmx6D4/EUZnkFS+LYr25RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoPdMgFHzYzv3wjme0ud/swQZ6VMB8GA1UdIwQY MBaAFEPHe0c2NoE3j6zkZhQdVMyIOZz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wMTgwOWItNDJkZC00MTM2LTk2YjEt MWZkMTBkOGUwNzVmLzEvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8wMTgwOWItNDJkZC00MTM2LTk2YjEtMWZkMTBkOGUwNzVm LzEvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWcz+X0n 1Fan6ddIQgLXtrIedzWkUKqGoS7Em2ex4WeCqU18fPFFtD3BCpNaHiLyMbjYfRj8 1aOo/x5aYlU0ay79SvJFq7km/xzjPyqqnYIxe4NWz2eCjKn/QwBIsDP08Q4dty+t dPuIdUJdWwe0ktoq+4/az7bz5BGHMfr5FX6o7Bqklmn7+ix1rsHXbFdqzuTkwpH/ eaqzWWXjanO3enWpA/6IuE+0cW/HEkjP9rqwVkSoD6ocN+D51oBDmME1L2GG3j+U JEwu75XfHUrABuN0KaJjl9sQmkEUb+hxOWWTOQd1YUPHpwiYzIvxsD+QXcJqG+mh 0xMUhLOzgzeKGg== -----END CERTIFICATE-----Generated at Sun Dec 21 20:35:15 2025 by rpki-client